| Package | Affected versions | Patched versions |
|---|---|---|
| openemr | ≥ 2.7.2, ≤ 6.0.0 |
In OpenEMR, versions v2.7.2-rc1 to 6.0.0 are vulnerable to Improper Access Control when creating a new user, which leads to a malicious user able to read and send sensitive messages on behalf of the victim user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free